The SEC Whistleblower Program

Reviewed by Bram Whitfield (BW), Editor-in-Chief — Whistleblower Award Programs Practice. Updated May 2026.

The SEC Whistleblower Program, created by the Dodd-Frank Act of 2010 and codified at 15 U.S.C. § 78u-6, is the largest and most active federal whistleblower program in terms of both submissions and award amounts. Since its launch in 2012, the program has paid over $2 billion in awards to more than 400 individuals. Understanding how the program works in practice — from initial tip submission through award determination — is essential for anyone considering reporting securities violations.

What the Program Covers

The SEC Whistleblower Program covers violations of the federal securities laws, which include: accounting fraud and financial statement manipulation (artificially inflated revenues, understated liabilities, improper revenue recognition, off-balance-sheet schemes); insider trading by corporate insiders, analysts, or their tippees; market manipulation including spoofing, layering, pump-and-dump schemes, and wash trading; Foreign Corrupt Practices Act (FCPA) violations, including bribing foreign officials by U.S. issuers or their agents; Ponzi schemes and investment adviser fraud (misappropriating client funds, undisclosed conflicts of interest, false performance records); offering fraud in connection with the unregistered or fraudulent sale of securities; broker-dealer regulatory violations; and failures by registered entities (investment companies, advisers, broker-dealers) to maintain required compliance systems or disclosures. The breadth of the federal securities laws means that the program covers an enormous range of conduct across virtually every sector of the U.S. economy.

How to Submit a Tip

Tips are submitted using Form TCR (Tip, Complaint, or Referral) through the SEC's online reporting system at sec.gov/whistleblower. The TCR requires a description of the potential violation, the identities of the individuals and entities involved, and supporting documentation where available. Crucially, a TCR submission establishes your submission date — which determines your priority relative to other whistleblowers who submit information about the same violation. The submission date matters because the SEC generally pays only one award per enforcement action, and earlier submitters have priority when multiple whistleblowers provide information about the same scheme.

You can submit a preliminary TCR while your information is incomplete, then supplement with additional documentation later. This protects your submission date while allowing you time to organize your evidence. The SEC's rules at 17 C.F.R. § 240.21F-2(b)(2) recognize supplemental submissions made within a reasonable time.

Anonymous Submission

You can submit a TCR anonymously if you are represented by a licensed attorney. The attorney submits the form on your behalf, identifying themselves but not disclosing your identity to the SEC. Your anonymity is maintained throughout the investigation. Before an award can be paid, you must disclose your identity to the SEC — but the SEC keeps that disclosure confidential from the public, from the media, and from the company being investigated. Anonymous submission is strongly recommended for current employees who fear retaliation, because it allows you to preserve anti-retaliation legal protections (which require reporting to the SEC) while maintaining some protection from immediate exposure. An experienced whistleblower attorney can manage the anonymous submission process.

What Makes a Strong Tip

The SEC's award rules at 17 C.F.R. § 240.21F-6 identify the characteristics of tips that support higher awards. A strong tip is: specific (naming specific individuals, describing specific transactions, citing specific dates and amounts rather than general allegations); credible (supported by documentary evidence — emails, financial records, trading data, contracts — not just the whistleblower's verbal account); original (not duplicating what the SEC already knows from other sources or from public disclosures); and causal (providing information that actually prompted or materially advanced the investigation, not just confirming what investigators already suspected). Vague tips alleging general misconduct without specific facts or documentation are less likely to generate enforcement actions and receive lower award percentages when they do.

The Award Determination Process

After an enforcement action concludes and sanctions are collected, the SEC opens the award determination process. Eligible whistleblowers who submitted relevant TCRs are notified. They receive a "Notice of Eligibility" confirming they are in the pool of potential awardees. The SEC staff then prepares a "Preliminary Determination" setting the proposed award percentage and amount, which is served on the whistleblower. The whistleblower can appeal the preliminary determination to the SEC's Claims Review Staff. After that process, the Commission issues a "Final Order" that is the legal determination of the award. Final orders are publicly announced but do not identify the whistleblower. Final orders can be appealed to a federal circuit court of appeals.

Anti-Retaliation Protections

Dodd-Frank Section 21F(h)(1)(A) prohibits employers from discharging, demoting, suspending, harassing, or in any other way discriminating against an employee in the terms and conditions of employment for: providing information to the SEC; initiating, testifying in, or assisting in any SEC investigation or proceeding; or making disclosures required or protected under the Sarbanes-Oxley Act, the Exchange Act, or other laws under the SEC's jurisdiction. Remedies for retaliation include reinstatement to the same seniority status, double back pay (twice the amount of back pay owed), interest on back pay, and attorney fees and litigation costs. The statute of limitations for retaliation claims is six years from the date of the retaliatory act (or three years from when the employee knew or should have known of the violation, whichever is later).

An important limitation: in Digital Realty Trust v. Somers, 583 U.S. 149 (2018), the Supreme Court held that Dodd-Frank's anti-retaliation protections require reporting to the SEC. Employees who report only through internal compliance channels without also reporting to the SEC are not protected under Dodd-Frank § 21F. They may be protected under Sarbanes-Oxley § 806, which covers internal reports, but SOX has different remedies and procedures. This distinction makes the reporting strategy decision — internal first vs. SEC directly — a legally significant choice that an attorney should guide.

Return to the calculator, see the how awards work guide, or check our FAQ.